Skip to content
June 20, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • News
  • Data Leak
  • Hackers sell US military drone documents for $150
  • Data Leak

Hackers sell US military drone documents for $150

Do Son July 13, 2018 2 minutes read
US military drone documents
Add as a preferred
source on Google
The MQ-9 drone (codename: Reaper) is a highly lethal new crewless combat aircraft capable of performing intelligence, surveillance, and reconnaissance (ISR) missions. In March 2007, the US Air Force formed the Reaper UAV Attack Squadron, the 42nd Air Attack Aircraft Squadron at Crich Air Force Base, Nevada, and set up a particular Reaper UAV Working Group. Research tactics, train crews, and conduct practice drills.
According to several media reports, the threat intelligence company Recorded Future recently discovered that a group of hackers is selling sensitive military documents in the dark market trading market, including the maintenance manual and pilot list of the MQ-9 Reaper drone.
It is also worth mentioning that the military documents being sold are not limited to the information related to the MQ-9 Reaper drone. Other materials include the description of improvised explosive devices. Various training manuals for the bombs, M1 Abrams tank operation manual, crew training and survival manual, and documentation detailing tank tactics.
The US-based Recorded Future said that for these online sales files, hackers are relatively inexpensive, ranging from $150 to $200.
Image: recordedfuture
Recorded Future also said it had contacted hackers online. According to hackers, they obtained these files by exploiting vulnerabilities that publicly disclosed in the Netgear router in 2016.
Hackers use the Shodan search engine to discover those vulnerable Netgear routers online and then exploit them to exploit them. Hackers say these routers are still using known default FTP passwords, which makes it easy to log in, and some of them are in military facilities.
Based on some information posted by hackers on the Internet and conversations with them, Recorded Future was finally able to determine that the attacked military Netgear router located at Crich Air Force Base, Nevada. After obtaining some necessary access rights through the router, he successfully got the maintenance manual and pilot list of the MQ-9 Reaper drone.
The MQ-9 Reaper is considered one of the most advanced drones in the world and is widely used by the US Air Force, Navy, Central Intelligence Agency, Customs and Border Protection, NASA, and other countries. use.
For other military documents, the hackers did not disclose where they specifically stole, but Recorded Future, based on some information they posted, believed that the source of the materials was likely to be the Pentagon or some US Army officials.

Related coverage

  • MedEvolve leaked over 200,000 patient information due to server vulnerabilities
  • ClaimPix Data Exposure: 10TB of Insurance Records, Vehicle Data, and Legal Documents Left Unprotected
  • Hacker attack on Xplain: Swiss Govt. Data Exposed in Report
  • Western Digital suffers network security incident
  • Ubisoft Hit by New Data Breach

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: US military drone documents

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🔴 Live Critical Threats

  • CVE-2026-5366CVSS 9.9
    Prefect version 3.6.23 is vulnerable to remote code execution due to improper...
  • CVE-2024-58351CVSS 9.8
    Flowise before 2.1.4 allows configuration to be injected into the Chainflow during...
  • CVE-2022-50972CVSS 9.8
    WooCommerce 7.1.0 contains a remote code execution vulnerability that allows attackers to...
  • CVE-2019-25763CVSS 9.8
    WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability...
  • CVE-2026-11551CVSS 9.8
    The Branda plugin for WordPress is vulnerable to privilege escalation via account...
  • CVE-2026-56081CVSS 9.1
    Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker...
  • CVE-2026-56073CVSS 9.4
    Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that...
  • CVE-2026-55447CVSS 9.6
    ### Summary All components based on `BaseFileComponent` are vulnerable to the following...
  • CVE-2026-48584CVSS 9.9
    Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to...
  • CVE-2026-48582CVSS 9.6
    Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate...
Powered by CVE WATCHTOWER

Recent Zero-Day Vulnerabilities

  • GreatXML BitLocker Bypass: Public PoC Exploit Disclosed
  • Check Point VPN Vulnerability Exploited in the Wild with Ransomware Links
  • Weekly Threat Intelligence: June 1 to June 7, 2026
  • Cisco SD-WAN Vulnerability Exploited in the Wild with Root RCE Risks
  • Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
  • Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.